caseyjohnellis

This morning, about 100 people sat in on the kickoff call for IST's Fragile Foundations Sprint.

Aaron Mog put the Zero Sum episode up on Tuesday, under a title I did not pick and could not improve on: I'm Not AGI Pilled.

I've been trying to compile a raft of notes and thoughts into a post, but I'm thinking that the ol' bullet-point dump is going to be the way to go here...

In mid-July the Internet ran a live-fire exercise on a question I keep circling back to, and I started writing this post while the logs were still warm.

I shared a few thoughts in a podcast with Chris Hughes a week ago that, based on responses, have created some annoyance in the assurance industry.

...and away we go!

It's that time of year again...

Marcus Hutchins posted something on LinkedIn back in May that's been rattling around in my head ever since, I've been making the same argument for twelve years: on stage, in print, and in conversations with anyone who'd sit still long enough.

Being known for what you're against is easy.

It's con season — Black Hat, DEF CON, and the summer security-conference circuit are nearly here.

A fun exercise: run various models against deliberately vulnerable apps, and eval them on their ability to identify the vulns and effectively patch them — without degrading app functionality.

Prompt injection is climbing out of the chat box and into the physical world.

If the AI era teaches you anything, let it be the lesson that words mean things.

I joined Sherrod DeGrippo on the Microsoft Threat Intelligence Podcast this week to talk about how AI is reshaping vulnerability research, disclosure, and patching.

A mate messaged me this week asking whether I'd ever written up my clanker setup: which harness I run, which models, what hardware, and whether I'd gone full Hermes or full OpenClaw.